
INDIANA DATA BREACH NOTIFICATION FORM 

OAGForm 1079 (R1 / 09-14) 
f*/ Identity Theft Unit 


OFFICE OF ATTORNEY GENERAL 
Consumer Protection Division 
Government Center South, S" 1 floor 
302 W. Washington Street 
Indianapolis, IN 46204 
(317) 233-4393-Fax 


Name and Address of Entity or Person that owns or licenses the data subject to the breach 


Name 

Ice Miller LLP 


Street Address 

One American Square, Suite 2900 


Submitted by 
Stephen Reynolds 


Firm Name and Address (if different than entity) 


Email 

Stephen.Reynolds@icemitler.com 


City 

Indianapolis 


Title 

Partner 



Zip Code 
46282 


Dated 

3/21/2016 


Telephone 

317-236-2391 


Relationship to Entity whose information was compromised 
N/A (same entity) 


| Type of Organization (please select one ) 




(U State of Indiana Government Agency 

1 1 Heallh Care 

□ Not-For-Profit 


1 1 Other Government Entity 

f~i Financial Services 

1/1 Other - please specify 


[~1 Educational 

1 i Other Commercial 

Law Firm 



Number of Persons Affected 



Date Breach Occurred (include start/end dates if known 


Date Breach Discovered 


Date Consumers Notified 


Unknown 


12/30/2015 


3/21/2016 



Reason for delay, If any, in sending notification 


The firm learned of a missing hard drive on December 30. Over the course of the following weeks, the firm worked with a private 
investigator, the IMPD, the Marion County Sheriffs Department and an attorney for the individual who reportedly had stolen the drive, 
in an effort to recover the drive and determine the scope of any breach. 


1 Description of Breach (select all that apply) 

□ 

Inadvertent disclosure 

□ 

External system breach (e.g. hacking) 

□ 

Insider wrong-doing 

□ 

Other 

0 

Loss or theft of device or media (e.g. computer, laptop, external 




hard drive, thumb drive, CD, tape) 




Information Acquired (select alt that apply ) 


0 Social Security Number 


[~1 Name in combination with (select all that apply) 

D Driver’s License Number □ State Identification Number 

□ Credit Card or Financial Account Information 

□ Debit Card Number (In combination with security code, access code, password or PIN lor account) 


List dates of previous breach notifications (within last 12 months) 


None 































INDIANA DATA BREACH NOTIFICATION FORM 


Page 2 of 2 



Manner of Notification to Affected Persons 


Attach a copy of a samp/e notification fetter 

i71 Written 
CD Electronic (email) 

0 Telephone 


Identity Theft Protection Service Offered 



Duration 

1 year (will continue upon request) 

Provider 

Lifelock 


Brief Description of Service: 

LifeLock's most comprehensive identity theft protection service. 


Since this breach, we have taken the following steps to ensure it does not reoccur (attach additional pages if necessary) 


Employee were retrained on the firm's existing policy prohibiting the storage of confidential information on unencrypted media. 
Additionally, systems/computer permission were changed so that no data can be moved to removable media without first encrypting 
the device, 


Any other information that may be relevant to the Office of Attorney General in reviewing this incident ( attach additional pages if necessary) 


In addition to written notice, we attempted to contact each affected person by telephone. 

To assist the affected persons protect against identity theft, we have offered to: 

- Provide assistance notifying the IRS, including the completion and submission of an IRS Identify Theft Notification Form; 

- Provide LifeLock Ultimate Plus, the most comprehensive identity theft protection service offered by LifeLock; 

- Provide assistance implementing credit freezes; and 

- Provide direct legal assistance Jrom our attorneys. 



















